add some dummy certs
use dummy certs
protect against empty array