added configuration ability to specify alternate CA cert information