production ssl certs from volume