certificate processing