Should we just get rid of `assoc-cert-file!` in favor of this new function?