Merge branch 'bugfix/update-ca-for-security-check' into devel

config/chroot_local-includes/usr/local/bin/tails-security-check

@@ -53,7 +53,7 @@ use Net::SSLeay;
 BEGIN {
     IO::Socket::SSL::set_ctx_defaults(
         verify_mode => Net::SSLeay->VERIFY_PEER(),
-        ca_file => '/etc/ssl/certs/cacert.org.pem',
+        ca_file => '/etc/ssl/certs/UTN_USERFirst_Hardware_Root_CA.pem',
     );
 }
 use LWP::UserAgent; # needs to be *after* IO::Socket::SSL's initialization