newslog: ca bundle over HTTPS