Add XCA - X Certificate and key management (latest)

:fake user agent is required so sf.net will serve us the dmg
instead of the source archive or Windows exe. Minimally, this seems
to be dependent on the presence of the 'Intel OS X' string in the UA