change to use key.pem only