base: add ca-certificates