new su3 cert as pwd for old lost, old one not in use till yet