certificate troubleshooting