update root CA certificate