Third-party certificate installation