test existence of cert.pem (problem seems common, Paul and me already