try the cert we downloaded