Generate cert – step 3-2