adding AIK to cert