update cert manager interface, partial implementation