Update on CA certificate handling