make cert name a constant
fixup cert naming