add SSL_CERT_FILE to env