debugging the cert generation process