Use `load_pem_x509_certificates` once cryptography 39 is released

This is just a reminder issue: we should replace our current PEM-splitting utility with this API once it's available in a release.

See: https://github.com/pyca/cryptography/pull/7878