keyPath -> key, certPath -> cert