updating certs