If your son was denied KCPE certificate because of fee arrears and you have exhausted all means of negotiation with the headteacher then the only option you have is to visit the sub county director of education for help.
If your son was being denied the certificate for something else other than school fees then you can contact the Ombudsman office for help: complain@ombudsman.go.ke.