Move certs part to puppet-certs module