Fix: wrong signature for self-cert
Added command 'certify'