use .crt by default instead of .pem