fixed cacerts checksum