certificate handling: create absolute path, check certfile for readabili...

...ty (see also  reaperhulk's 6a2ceb8)