Use updated base image (DigiCert roots)