Unhexlify the email address when embedding it in a certificate.
Merge pull request #315 from mozilla/unhexlify-email-in-certificate

certificate/sign produces all-hex "principal.email"