Returning cert is a good idea (TM)