[Users] replacing self-signed certificates