A Methodology for Model-Based Certification