test manually specifying CA locations since SSL_CERT_FILE env does not seem to work