Decode and minimize certificates after downloading
This way we don't need the full CA certificate chain at runtime, and save a bit of space.