added certificate expirey check for startup
switching to 128 bit AES keys