The OpenSSL project (no longer) includes root CA certificates. Please check out the FAQ: * How can I set up a bundle of commercial root CA certificates?