better query for SSL cert attributes