fixed endpoints for certificate