AM gets its certificate and pkey from the configuration file.