add eCert rotation (closes #5)