better interface for certs