specify root path for issuer.crt