hey are tokens that serve as certificates