ca-certificates: update makefile