roll test certs on registry