Jarv/certs role

@jrbl @feanil @e0d