add cert support