certManagerCertificateSpec