script for generating certs