--- certmgr_mode: standalone