rename server.crt to root_ca.cert