bug-in-certifytheweb