Use certfile (finally, huh)