create tmp dir, fix certutil command