also add ca.pem