Initial root store (Verisign, Thawte, some test CAs)