You need zwass' special binary that uses our TSL client abstraction, which will see the SSL content's cert search path.