certificate template vulnerabilities ESC1 ESC16