self contained certificate