OF-405 - TLS certificate validation and authentication issues

These two patches:

1) Update our shipped truststore in line with Mozilla's.

2) Address OF-405 and related issues.