updating client cert