add cacert.pem and CURLOPT_SSLVERSION config