more flexible attr cert generation