support startcom ssl certs with an extra ca.pem file + typo in readme