update cacert.pem and bump version