Use one keypair for all certificates.

Previously a new random public/private keypair were used for every self-signed
certificate in the Kerplapp Keystore. Now one random keypair is generated and
used for all certificates.

refs #1981, #2542