all the roles and minor fix of 'cert' vs 'certs'