# ca-certificates binding

Used only with `-Pcorporate-proxy`. Put your proxy's CA certificate here as a `.pem` file next to
`type`; the Paketo CA Certificates buildpack adds it to the build container's trust store so the
Java buildpack can download its JRE through a TLS-intercepting proxy.

`*.pem` files in this directory are git-ignored on purpose - a CA certificate from one network does
not belong in a repository. See [docs/04-buildpacks.md](../../docs/04-buildpacks.md).