Try to accommodate Dogtag's GetCACert results
Dogtag expects us to walk the RA's chain by asking for the certificate
for CA identifier "0", then "1", and so on, rather than bundling them
all up and handing them to us. Since we default to "0", we can try to
walk the list while gathering the server's chain.