does curl publish a set of trusted certificates?