install bits for generating certs (#1424)

for @jrbl. Currently only xhtml2pdf.