Add COMPATIBILITY for completeness
Use dynamic allocation for cert export
Same for mailstream_ssl_get_certificate()