Using an external CA certificate