This option can be set to a file (PEM format) containing CA certificates of root CAs to trust to sign certificates or intermediate CA certificates. tls certfile tls crlfile tls dh params file tls enabled tls keyfile