trying the root geotrust cert