The root update on 3/11/2014 removed the Verisign root cert that the Go tests use. This
only affects the 'TestSystemVerify' test in crypto/x509. I fixed the windows-amd64
builder by manually adding the certificate back to Windows using the instructions at
[1], except that I had to explicitly change the cert from 'Code Signing' to 'Verifying
Servers'.
agl says that the tests need to be updated, but it's a little non-trivial. For now the
crypto/x509 test will fail except on the builder. If that's a problem we can disable the
test, but I'd like to keep it if we can.
[1] http://www.sqlservermart.com/HowTo/Windows_Import_Certificate.aspx
