configured ca cert file is in addition to default ca certs