adding 400 condition to the certs nginx template