add integration tests for cert-generation