Use latest cacert.pem from cURL website, instead of relying on the system's list of valid CA certs.