[ansible] Fixup .cert suffix