use environment variables for cert and key