check/approve cert scripts