fix ca certificates repo url