add route to show certificate