openssl: download cert.pem (darwin-x86_64)