Replace X509Certificate with EnrollmentResponse for enrollment operations

EnrollmentResponse encapsulates the two possible responses for
simpleEnroll (#2) and simpleReEnroll (#3): an X509Certificate, or a
Retry-After date.
Use JodaTime
Added test for renew.
Added parser for 202 responses for simpleEnroll (#2) and simpleReEnroll(#3)