allow adding certificate