properly wrap cert nickname in single quotes