Explain how to update certificates