Merge "update cert using secrets" into elalto