use httpwebrequest so x509 certs work.  save certname to options file