new certificates.sh