Add private CA support to live stations

The --ca-cert certificate from CLI 1.2.0 only covered HTTP, so stations behind a corporate CA uploaded runs but showed as offline.

• Added private CA support to the live connection, so one flag covers every connection.
• Added the system certificate store as a trust source, so a CA installed by IT works without the flag.
• Fixed the "check DNS" message hiding the real certificate error.