add new export extract_pem_encoded_public_key and tests

* Provided a means endpoint get the x509 PEM-encoded
  public key from a valid certificate.  Used by EC erchef
  to correctly provide publick key  when GETing a user.