Operator should derive multiple Root CA certs from single secret

Support for Multiple Root CA certs is originally described here:  K8S-2287

And ask is to expand this functionality so that certs can be provided via single file rather than separated into separate files.  While the original design was optimal for operator's internal verification of client certs, it doesn't appear to be standard protocol within wider Kubernetes ecosystem.