certificates from encrypted data bag