changed CA cert to the pure Dod