Accept RSA keys / certificates as initializers for the authenticator.
Add a sanity check to verify that the test certificate has been signed
by the CA certificate.