add certificate locking