update certs task