Added certificate constraint