fix certificate path