implement certificate signing and revoke operation