certificate as attribute