signer functions to generate real verifiable certificates

Test with browser with go test -- -browser firefox.
Make sure to add ca.pem to your CA list.