Add SSL certificate service check

Now the `_check` function from NetworkCheck can return a single service check or a list of service checks.
Not sure, the only usecase I see is that people may be using an alternative keychain with their own CA or something that is controversial like cacert.org. Usually it's a superset of the regular ca-certificates anyway.