Changed the CA code to only grab the PEM-encoded version of the just the root CA cert - previously it was including the intermediate CA certs that the web servers were providing
Changed OS X and Linux to use the system CA bundle before trying to use our CA certs