#648 certificates generation