make cert and key mandatory