[NLnet-labs] Split out CAcert rules