Fun with ca-certs