replacing custom certificates