Fix certificate extension