include the new update cert and remove the no longer used Equifax cert. r=bbondy, a=lsblakk