Move EE root CA to the top of the file

Fixes an obscure bug with OpenSSL 0.9.8j and lower. Props @dd32, see
http://core.trac.wordpress.org/changeset/25569 for prior art.