fix certify keys without sign flag