no need to store in keys store cert should suffice