Maybe a CACert certificate should be enough