certs directory needs 755 to work properly