get cert from /data/per-user/default/combined.pem