cert endpoint