use certificate inside credential. add validation from sso test