look for matching CA certs when multiple certificates are stored in PEM file #22