Add CRL tests for the PB protocol, for checking client certificates

Also, add a heavily modified make_certs lib from OTP's test suite for
generating certificates via openssl. make_certs is used to generate a
bunch of certificates and CAs to test various scenarios.