The same issue was in #2243, and I amended 9fbcbf0a7 so that we can access the CA cert without doing `instance_variable_get`. I will do the same here.