work around issue with cert