no matter what I try, it never prints the root cer...