added app note for PKI certs