added pull before cert install