look for PLC_API_CA_SSL_CRT (myplc), default to /usr/boot/cacert.pem (node)