add the full cacert list so it actually works