fix cert