Update subscription cert retrieval to include cdn