How to update a root certificate