embed cert into http-package