external auditor report and certificate