[certificates] test cafile/cert/verify (2)