bug 1099: Overhaul the root certificate download site