Add support for hostkey certificates

While they're not exactly certificates, they belong in the same
category.