certificates.yaml scripts