Verify certificate locations, use GCM cipher