made cert generation handle domain name correctly, ready for permanent Peergos cluster!