fix certificates