Add test coverage for running certutil