replace certs for d-i, dsa, and rtc with LE