bug 1017: Support multiple formats on the client cert download page

Signed-off-by: Michael Tänzer <neo@nhng.de>
bug 1017: Always send certs in DER encoding and with content type
x-x509-user-cert on install which seems to be most portable except with IE
where we need another solution

Signed-off-by: Michael Tänzer <neo@nhng.de>
bug 1017: If the certificate was signed by the class3, include the subroot
when installing

Signed-off-by: Michael Tänzer <neo@nhng.de>
Merge branch 'bug-1017' into testserver-stable
Source code taken from cacert-20130129.tar.bz2
Merge branch 'tarballs' into release

Conflicts:
	scripts/db_migrations/version2.sh (file permissions)

Signed-off-by: Michael Tänzer <neo@nhng.de>
Merge branch 'release' into testserver-stable
Revert "bug 1017: If the certificate was signed by the class3, include the subroot" because it doesn't work

This reverts commit fc14edae064d7726e08838ad1bfb163f24463265.
Merge branch 'bug-1017' into testserver-stable
bug 964: Trailing whitespace cleanup

Also fixes one unnecessary BOM character in the keygen JS file
bug 964: Unbreak lines and do some proper indentation and spacing
bug 964: Reduce variable scope where possible
bug 964: Be a bit more paranoid here ...
bug 964: Make the structure of some queries more easy to read
Merge branch 'bug-964' into testserver-stable