uclient-fetch: load CA certificates