use cacert file from curl