Use CA to verify server