create cert after install