update certs and ca to include client certs (see riak-ruby-client)