caextract: provide a HTTPS download link as well