use correct cacertfile variable