for backwards compatibilty, copy primary server cacert to old directory