allowing password to be passed in, if the cert has a password