refs #2 user can create/edit a certificate