introducing certificate type in the CSR to help #7