properly generating ssl certs