update key for cert