goblin: fix the certifcate block and include the correct recipe for cert management