read cert files first