update to use ct instead of openssl etc