cft doesn't nicely handle certificate chains from firefox

[yschimke]

 ./cft ~/Downloads/idea-chain.pem
CN: 	Idea
Pin:	sha256/0f54dfa5bbbfa66b586eec5b7d0742a1cec80f2fda4b977a3b4aacb82877e32b
SAN: 	[hex=7f000001], [hex=ac16bf43], localhost, yschimke-pc, yschimke-pc.localdomain
OU: 	Development
Key Usage: DigitalSignature, KeyEncipherment
Ext Key Usage: serverAuth
Valid: 	2020-11-28T15:42:21Z..2021-02-26T15:42:21Z (2 months)

file contains two concatenated certificates, and hex are ip addresses.