add cert entry