fix wildcard certificate