Certificate checking via openssl cli tool with cafile support