Add logic to ship the PE console internal certs from the CA