activate update-ca-certificates-fresh