Acting as a Certificate Provider - the Pitfalls