Allow removal of default certificate trust

This adds a configuration 'ssl.use-default-certs' which defaults to
true.
If false, it will not attempt to load the system-wide default SSL certs.
Update tragically out-of-date CA cert list
Version bump