pull cert for current environment