* move to use embed instead of a multi-line string * add test to ensure all certificates are valid * add test to ensure validity (no expired certificate)