ca-certificates: work around duplicate signed roots

openssl issue where two signed roots have the same CKA_LABEL resulting in identical filenames.
Ship both versions of the same signed roots instead of overwriting first found.

Signed-off-by: Michael Powell <michael_powell@mentor.com>
Signed-off-by: Mikhail Durnev <mikhail_durnev@mentor.com>