now actually fixing problem in cert.cnf