big notice for how to use gen_cert.sh