Support system certificates
Updater prefers certificates to be given explicitly, but that is unexpected by users. More expected would be if url is configured as that it should check certificate and if ca extra option is nil, than we would use system certificates.