add certificate_management.md