initial set of certificates