moved cert script to bootstrap