refine CertUtil.import_ca under linux