pki: fix spice pki certificate parsing

fixed spice pki certificate parsing and moved it
to validation stage for having the correct certificate
subject in the answer file.

Change-Id: I0188e3f27008c989f6c0ff7de7fa47215fc32466
Signed-off-by: Sandro Bonazzola <sbonazzo@redhat.com>