https://blog.clarence.tw/2021/03/11/aws-iot-negotiation-fails-and-the-wrong-certificate-is-not-trusted-how-to-update-the-certificate/