add ca_certs definition to config, and use accordingly
slight tweak to readme
read from the ssl conn we created.