path /certificate/ auth no method find allow *