Make a cert to allow for updating of the kernel