so make them peoper Version 3 certificate. Add a driver script to handle all the details of updating.