@jkakavas, I modified the docs in 0a40a3b3b75832b80d7a7d48edca2e2c1c5df637 to indicate using the `http_ca.crt` file on disk, and updated the `openssl` command to match -- thanks for the less-scary syntax!