use the supplied certs