bugfix with certs