certificate retrieval implemented