fixed non-certificate non-secure-secure case