absolute path for certificate