move certs to lib