update cert generation stuff