New keystore with root and intermediate certs