ca.crt is not required for the main https daemon