replace ca_certs.pem, remove non-SSL tests