updated Makefile so that CERT defines the path to the public CA certificate instead of its directory. It makes more sense and is more consistent with the rest of the build process (notably live-exam-iso)