update to Linux 3.16.3 & switch to /etc/ca-certificates/conf.d/mozilla.conf