using ID and KEY from settings in gen_cert