added some more validation to RA and removed the VPN choice for certification ordering