use my fork of pem for now to add subjectAltNames to the test certificate

`tls.createSecurePair` is deprecated since node v0.11