Update cert.cnf.erb