moved cert generation