limit wait for cert