add cert_path to config