updated procedure for key/cert stuff