signing certificate subgroup of certificate, 3 assertions