X.509: Fix certificate gathering