put certificate workflow first in order