test for "don't add begin, end certificate"