newer is actually better, since just certs and we want the newest certs