changed sync reading of certs to async