pub fn validate_site_replication_ca_bundle(pem: &[u8]) -> Result<()>
Validate a bounded certificate-only PEM bundle for site replication edits.