add sign script for self-signed certificate