certs: use $< and $@ to simplify the key generation rule