Factory for certificates.
Create X509 certificates. Note: It is the caller's responsibility to close this stream.