fix for cert generation