Bugfix to certificate asset downloader

* Target directories weren't being created, so if they didn't already
  exist, the download would fail with an exception. Now we recursively
  create any missing directories in the target hierarchy.