properly use certificate settings after multiple changes, closes #462