PKCS10 rewrite
Generating X509Cert and X509CRL need not depend on BC
Updated tests from old jruby-openssl gem
Remove deprecation suppression and fix some of the simpler deprecation issues