CACert status clarification