pass the certificate around