initial commit utilities, root certs