work on #1: UI to pick certificate and confirm signing