update certificate