check for both: default SSL CA path *and* info