ca-certificates: remove CNNIC root CA

Issues with this CA had been raised before, so after this incident:

http://googleonlinesecurity.blogspot.com.es/2015/03/maintaining-digital-certificate-security.html

I'm blacklisting it.