How up to date are NS's CA certs?