Core review feedback - make ca.pem checking independent of cert.pem checking