is there a cert bundle on OS X, dropped by a browser? The large issue is OpenSSL on OS X uses a shim to access certs stored in Keychain