Attempt to force update ca-certificates to latest

Curious if you're able to force ca-certificates to the actual latest version, rather than just the latest for "Jessie". This might be a better way to resolve the issue, if it works of course.