userCertificate, wrong attribute type?