handles everything TLS/SSL related, including certificates