fix search.d.o cert chain