update cert using secrets