point rsa_cert_file to crt file instead of pem