Changing the Rules - A Solution to the Certificate Replacement Dilemma