if no user is logged in we use the system wide certificate bundle