now supports inline certs