Update ca-certificates to match nss 3.16 provided certificates.

Deliver links for both OpenSSL 1.0 and 0.9.8