add bundled root ca certificate for collector.instrumentalapp.com, basic specs for ensuring we are checking against root ca