add support for generating TLSA records directly from a certificate file