Add README about removed root CA certificates.