ash and no ca.pem