Support decrypting a server CA certificate so we can get its expiration (valid-before...