support for multiple certificates in a single file, like this ca-root-nss (taken from FreeBSD ca_root_nss-3.14.3 package)