generates pubcert after signing

Change-Id: I5d3086f2066ae66215b2feb7ec8649e95d5a7da3