asheroto/updaterootcertificates

explained in about a minute