finally working
and the needed keystores / certs