repair certificate generation after jwcrypto port