move gen_cert to config/