update test, we now expect a 404 when a certificate isn't available