aws cert exports (cert files not committed)