better mech and arch to handle certificate profile with special behaviour