Extracted with: openssl s_client -connect clojars.org:443
The new certificate is trusted by Oracle JVMs by default but there are still some users with JVMs that don't have any default root certs at all. The FreeBSD OpenJDK packages are apparently one such example.
Should fix #304 and #613.
