Put CA certificate in Base64-encoded X.509 certificate format, enclosed between "-----BEGIN CERTIFICATE-----" and "-----END CERTIFICATE-----" (which is usually saved as *.pem).