wouldn't this be the one that `curl` uses for its ca bundle?