add OPENSSL_X509_CERT_FILE to the `git` command environment