More conversion functions

This contains 3 sets of changes:
* Add -> functions for reading/writing CRLs to PEMs
* Add -> functions for working with a single certificate
* Move the issued-by? and has-subject? out of the API and into the tests

@jmay-puppet See the lengthy discussion on the previously closed PR