add real certs in config