Fix the expiration attribute, push the cert attributes under a :installed level under :certificate, update docs