add ssl-cert group on cert upl/gen