add-reach-cert