1024-bit root CAs required to download from GitHub, other HTTPS sites (that's the bug in Joomla!)