fix certs