HY2 certificate endpoint