using the API to add a certificate seems to work but the returned value is {"created":"created"}
and does not include the id for the new certificate. Unfortunately this makes it impossible to add the new certificate to a site route or to delete it via the API.