setting cert urls in extra vars