preparation work for x509 cert handling