add certutil notes