Certificate proxy

@rcruz : this should do it...