use older version of cacert bundle which still supports the 1024-bit keys (see opscode/chef-dk#199)