update certificate fingerprints for new certs