Updates to negative cert generation.