modified to use system trust store