fix certificate