handle '\r's in input, check for failure to read certs from input