load certs individually