use new image with updated certs