[PATCH 02/16] cert: Accept lists of CA certificates instead of one