If you dont know the original cert.id password then you are completely stuck to certify/recertify ANYTHING from that level. It is setup when the server is created and does not show in the certlog of password recovery (if you have that set up). Why would you need to recertify the server id - by default they are certified for 100 years, I dont know about you, but my Domino/Notes hasnt been around for that long !