pin only the root certs. enable tests
bump patch version
Merge pull request #19 from Clever/cert-refresh

pin only the root certs. enable tests