adding new cert (last one expired)