Replace custom Load with File.ReadAllBytes
Switch to File.ReadAllBytes since we do not have to support pre-2.0 code
Do not assume the first certificate of a PKCS12 file is the one matching the key (even if it's the most common way). ref: desk #54722