dns cert endpoint