Ah OK, then it should be easily improved by adding the check of the existing cert file before calling mokutil.