Hard work done by http://mercurial.selenic.com/wiki/CACertificates R=golang-dev, gri CC=golang-dev https://golang.org/cl/5276043
Fixes #1009. R=adg, rsc CC=golang-dev https://golang.org/cl/5262041