certify keys