make certificate depend on generator