add certificate to trusted root