OSX install: check for cert ".pem"