X509TrustManager: allow > 1 certificate for rollover purposes