update config even if we already have cert