tidy and update cert chain install