add script to download CA
read CA cert asynchronously and cache it