And that is how it's done. Always. Only the TA can issue certs. Your broker needs to do it because your shares need to be sent back to the TA.