profile: add comments
ca-certs: add signatures of CA certificates