dereferencing cert-names into cert-ids