- sign with new certificate that expires in 2014