should we move this file and the helper script to the certs subdir (and also move the original 2 cert files there, rewriting the path in tests)?