fixed certs and signing