create a signed certificate