Modified CertificateReference to take an actual cert

It's possible you may already have a cert. In that case, we'll accept that in CertificateReference.