restructure certs/keys; add key/cert generation

NID is also now an exposed type
improve GC handling (fixes #10)
Merge pull request #18 from lunixbochs/keygen

restructure certs/keys; add key/cert generation