proxy cert endpoint