move cert gen to new repo