manifest-refresh - removed hardcode cert