better location for SSL cert