use apr_pescape_hex() to turn the cert fingerprint into a string
we don't care how big the digest is anymore
axe useless debug trace
more chars that shouldn't be in a filename (but they probably weren't in the URL anyway)
don't process a particular cert for each vhost
a bit less fingerprint noise
don't always need MTIME
add utility routine to read a directory