add ca certificates for verifying api host ssl