rename fields
cert -> pki_name