use ngettext for plural messages in certlib/managercli