deal with cert exchange upload