ppw frontend - cert

placeholder served from S3 via CloudFront