added ca-cert to hosts.conf so browsers are properly sent intermediate
certificates