/roles/
../
signed_certificate