update bundle certificate

avoid trying to install unverified update bundle because of expired certificate by either:
- use certificate with unlimited validity ?! (=> no, probably not)
- renew certificate during build/install process (only possible as long as certificate in charge on device is valid !?)
-  daemon on device to renew and issue new certificate!!