embed certificate