fix root certificate not being added