updated cert with larger expiration