login.config to use private-CA root certificate

[Peter Schober]

* David Bantz <dabantz at alaska.edu> [2013-08-01 00:00]:
> "In almost all cases, OpenSSL will assume that there's only one certificate in a given file. 
> As such, it will generally only use the first certificate that it finds, and will ignore all others."
>  <http://www.gagravarr.org/writing/openssl-certs/general.shtml>

Note that there is no OpenSSL at play in the IdP,
-peter