Certificate flags