use core pki functionality and widgets