"End-user certificates need to be forged and notarized."