now uses CA only