hybrid certificate trust