moved certificate locations out of constructor