split cert and ca dir