“certificate security graph”