no new root certs, many removed

ca_bundle

349d320
< ComSign CA
400d370
< NetLock Qualified (Class QA) Root
409d378
< S-TRUST Authentication and Encryption Root CA 2005 PN
416d384
< Sonera Class 1 Root CA
427d394
< SwissSign Platinum CA - G2
436d402
< TDC OCES Root CA
446d411
< UTN USERFirst Email Root CA
448,449d412
< UTN USERFirst Object Root CA
< UTN-USER First-Network Applications
455,459d417
< Verisign Class 1 Public Primary Certification Authority
< Verisign Class 1 Public Primary Certification Authority - G2
< Verisign Class 1 Public Primary Certification Authority - G3
< Verisign Class 2 Public Primary Certification Authority - G2
< Verisign Class 2 Public Primary Certification Authority - G3