ssl cert gen improvements