config support for certificate location