Formal Certification Specifications