Allow ec2 load balancer cert to be specified as 'cert_lookup'

cert lookup to move environment specific certificate names out of lb_generic into an environment specific file.

the change to list_certificates handles an edge case where only one certificate is returned by aws.