add aaf root ca certificates for osdf