Initialize ca certs to an empty array as they're optional