use db to mark keys which can certify