diff --git a/README.md b/README.md
index 61c93ba..6cc2571 100644
--- a/README.md
+++ b/README.md
@@ -58,6 +58,7 @@ const envSchema = z.object({
   SERVER_SSL_ENABLED: zBoolean("false"),
   SERVER_SSL_CERT: z.string().optional(),
   SERVER_SSL_KEY: z.string().optional(),
+  SERVER_SSL_CA: z.string().optional(),
   TRUST_PROXY: zBoolean("false"),
   SELF_MONITORING: zBoolean("false")
 });
diff --git a/src/index.ts b/src/index.ts
index fcfff98..611e5ef 100644
--- a/src/index.ts
+++ b/src/index.ts
@@ -46,7 +46,8 @@ const serverOptions = {
   https: env.SERVER_SSL_ENABLED ?
     {
       key: readFileSync(env.SERVER_SSL_KEY!, "utf-8"),
-      cert: readFileSync(env.SERVER_SSL_CERT!, "utf-8")
+      cert: readFileSync(env.SERVER_SSL_CERT!, "utf-8"),
+      ca: typeof env.SERVER_SSL_CA === "string" ? readFileSync(env.SERVER_SSL_CA, "utf-8") : void 0
     } :
     null,
   disableRequestLogging: true,
diff --git a/src/modules/env.ts b/src/modules/env.ts
index bf1b3dd..1e81072 100644
--- a/src/modules/env.ts
+++ b/src/modules/env.ts
@@ -11,6 +11,7 @@ const envSchema = z.object({
   SERVER_SSL_ENABLED: zBoolean("false"),
   SERVER_SSL_CERT: z.string().optional(),
   SERVER_SSL_KEY: z.string().optional(),
+  SERVER_SSL_CA: z.string().optional(),
   TRUST_PROXY: zBoolean("false"),
   SELF_MONITORING: zBoolean("false")
 });