fix cert's path
add cert generation