add cert generation to deb