Add ca.crt to keystore, if it exists

[arturdzm]

Currently when keystore is generated from mounted file and root CA is in separate file (ca.crt) the keystore will have incomplete chain