Using a copy of curl's ca bundle before RSA-1024 removal

A newer version of the cURL cacert removed some CA's. This can cause
some client to fail, so I'm reverting a recent ca bundle update.

From the cURL site:

> Around early September 2014, Mozilla removed the trust bits from the
certs in their CA bundle that were still using RSA 1024 bit keys. This
may lead to TLS libraries having a hard time to verify some sites if the
library in question doesn't properly support "path discovery" as per RFC
4158. (That includes OpenSSL and GnuTLS.)