Fixed single-domain cert