Porting fix for T3-1156 from T2 maintenance: revoked bio*cat certificates. Added CAs' certificates.