diff --git a/.gitignore b/.gitignore
index 3c46d85b..0d450e8b 100644
--- a/.gitignore
+++ b/.gitignore
@@ -31,4 +31,5 @@ raqia.json
 
 scratch/
 seeds/
+certs/
 lamassu.json
diff --git a/lib/pair.js b/lib/pair.js
index 8ff9d079..9c92206c 100644
--- a/lib/pair.js
+++ b/lib/pair.js
@@ -4,7 +4,7 @@ const pify = require('pify')
 const readFile = pify(fs.readFile)
 const db = require('./db')
 
-const CA_PATH = path.resolve(__dirname, '..', 'ca-cert.pem')
+const CA_PATH = path.resolve(__dirname, '..', 'certs', 'ca-cert.pem')
 
 function pullToken (token) {
   const sql = `delete from pairing_tokens
diff --git a/todo.txt b/todo.txt
index a6b92af4..0aeb3e1b 100644
--- a/todo.txt
+++ b/todo.txt
@@ -104,3 +104,8 @@ options: configure per machine; configure per crypto/fiat
 - twoWayMode should be per crypto
 
 - add cassette count handling in machines/actions in admin
+
+--------------------------------
+
+- need to create CA: http://stackoverflow.com/questions/19665863/how-do-i-use-a-self-signed-certificate-for-a-https-node-js-server
+