move cert to working dir