update public certificate and enable certificate verification