certificate should be lower case