support certificates via config