Upgrade ca_root_nss certificates