Add OS-SIMPLE-CERT extension

This provides a very basic mechanism for retrieving the CA and signing
certificate from the identity service.

Change-Id: I24c77188ebb05ef57b378798584e3829d55827f2