working on cert creation