using new API to get certficiate without a password