switch to use pkg_resources
fix certificates file