endpoints for certificate and jwks