Use the normal group name
Use a general pg.psf.io certificate