update pgcert: sign