re-org apps/certs