the others are still generating bad cert errors