What kind of certificates to use for packages?