fixed issue with well-known certificates being overloaded