diff --git a/testssl.sh b/testssl.sh
index 83955fb..009f80c 100755
--- a/testssl.sh
+++ b/testssl.sh
@@ -195,6 +195,7 @@ ERRFILE=""
 CLIENT_AUTH=false
 NO_SSL_SESSIONID=false
 HOSTCERT=""
+CA_BUNDLES=${CA_BUNDLES:-"$INSTALL_DIR/etc/*.pem"}
 HEADERFILE=""
 PROTOS_OFFERED=""
 TLS_EXTENSIONS=""
@@ -211,7 +212,6 @@ OSSL_VER=""                             # openssl version, will be auto-determin
 OSSL_VER_MAJOR=0
 OSSL_VER_MINOR=0
 OSSL_VER_APPENDIX="none"
-CA_BUNDLES="$INSTALL_DIR/etc/*.pem"
 HAS_DH_BITS=${HAS_DH_BITS:-false}       # initialize openssl variables
 HAS_SSL2=false
 HAS_SSL3=false