Initial BDD spec for certificates workflow