replaced with long lived (10 years)certificate