Attach to agent if its a bought cert?

Hi

Just a quick question, just need to clarification.

I have a bought SSL certificate that I use on my server, works good.

When I setup the agent on a client, must I still add the PEM file? I was hoping not.

But I saw this in the client log:

Cannot establish communication : 500 SSL_ca_file /var/lib/ocsinventory-agent/https:__ocs1.mydomain.com_ocsinventory/cacert.pem does not exist

If I create the cacert.pem on the client the client shows up in ocs. I can get that I must add it if I have a self-signed cert, but is it the same when you use a bought one?