Stable certificate links

Urls to certificates should not encode the version in them.

This changes links to published certificates to use an unversioned url for embedding/badges etc.

Unpublished certificates and modifying urls still use version ids.