update certs and keys