proxy certificate endpoint