raised questions on the issuance of offline certificates