fixes to which cert and key goes where