initial version: one self-signed pem encoded cert in assets