send nil for :ca_file so a custom :ca_path on Net::HTTP will work correctly (blank string seems to override anything in :ca_path)