This extra erroneous underscore caused a new CA key pair to be created for each new certificate issued.
Add hostname to task name