“key certificate security”