modify R509::Cert#issuer and #subject to return R509::Subject objects

This requires changes to CRL::Administrator and
CertificateAuthoritySigner, but also lets us remove 4 unneeded methods
from the Cert object (since R509::Subject allows for elegant fetching of
subject components)