cert-only placeholder