configuring certificates