updated .gitignore to not replace certs