fix default certs