add API function to get peer group role and some fixes
refactor and implement op certificates/roles. removed multi-certs