(#21970) document certificate endpoint