* relax CA constraints for client (the client equivalent of PR #1675) * fixing incorrectly hard-coded output file path