DfC certificate handling clarifications