list. Allow CERTIFICATE to be used in PEM headers for PKCS#7 structures: some CAs do this.
could rename too :-(