certificate generation for staff (without token)