update cert