openssl verify -CApath /etc/ssl/certs