- RA using certificate generator