certificate updates