make the cert file path configurable