certificate mime type and route plus fixed the sandbox route