yet another srt / bytes issue in certificate