update root cert