Create CAcert role

The core of this role was submitted as a patch to franklinkim.openssl but it
was agreed it would be better as a separate role.

Only does Debian at the moment and hasn't been tested outside franklinkim's
role - testing next.
Fix syntax errors in role

Its now ready for prime time! (in a beta way...)