cert step
sign pkg with certifcate