update certificate (not complete)