Update Obs. cert chain whitelist