set the default cert file