Closing streams on input operations in CertificateUtils and after
writing a PEM keystore, added doc about not closing streams in low
level output operations.