after recovery load certificates