Copy CA bundle from ca_root_nss port, fixes #3008