use cert_name to allow numbered and named certs