Still using globalsign certs, roll back ca.js for now