Added support for -CAfile openssl flag in addition to -CApath if verifying Gandi's SSL cert