specify the cacert file when it exits