changed certs to be encrypted with password