jenkins: switch to the new certificate from startssl