fixed certificates again