certificate handling: create absolute path, check certfile for readability (see also  reaperhulk's 6a2ceb8)