certificate is in buffer format as well?