config.xml certificates