fixed how we generate certs to work better with chrome