gnutls_certificate_set_x509_trust_*() now accept single DER certificates