External certificate handling