Support reading CA certificate from raw *.pem file

It's a pain to add the Couchbase root CA certificate to a java keystore. It would be nice if users could just point to the *.pem file they downloaded from the Couchbase Cloud admin site.