ssl_ca_crt is implemented by automatically appending it to ssl_crt.

apache-ca-certificate is kept unimplemented, but explained how workaround it.