bug fix: add ca_cert_path for refund request