assuming you have the correct cert available