use the http://curl.haxx.se/docs/caextract.html cacert.pem