Updated certificate for additional apps

  Also includes intermediate certificate, in case we want to support
REALLY old browsers.

this needs to be tested before merging, so please hang on before deploying