Wouldn't it be better to bundle a script that generates a cert instead of the cert itself?