change certificate mode from 600 to 660