Set certificates via gnutls_certificate_set_retrieve_function3()
The new API allows stapling multiple OCSP responses (to be implemented later). Requires GnuTLS 3.6.3 or newer.