unbound DoT cert placeholder