Updated certificate generation in accordance with ideal 3.3.1

See section 8.4:

http://www.rabobank.nl/images/pdf_20130703_ideal_merchant_integratie_gids_v3_3_1_nl_juli_2013_29542840.pdf