update certificate with a new private key