where do we get the certs from? if we don't use CP i think we can remove this for now.