add doc
correctly access cert