Fix signing of certs, add  a few convenience methods