move the certificates operation to serialization