Fix cert db ownership