more rejigging certs
tests passing