certificate: implement certificate store