certificate type 4 - add permission number