fix the certificate