Use app.pem as default if pem not set