@azonenberg
Don't forget the -y to force overwriting the existing certificate.
@gsuberland