clean certfile path before handing off to socket()