FYI: on OS X there's no OpenSSL cert store, so you...
# general
t
FYI: on OS X there's no OpenSSL cert store, so you need to distribute roots alongside your intermediates