new ssl config
talk about the certs and where they live