Options for loading certificate authorities

+ more error reporting (for ssl)