website/docs: doc ca_cert settings [GH-4528]