fix cert path