cert for embedding