fix #66: added A/I CA and services certificates (A/I and riseup.net)