Add ca.crt
Fix SSL ca bundle handling in EST