cross-cert changes