fix startup cert