add reseed cert
signing key type check