christoph: thawte + root + ssl + ca