ok. I managed to create the PEM certificate, test it and got OK. So I upload it online along with the other files.
question : this is for "development" and uses the sandbox. will I have to do the same for the deployment certificate? in the sense that it will be a separate one not using sandbox. Am I correct?