[build] use latest versions
use new FileResource.inputStream method
lock the x509store when using the list of certificateMethods

use the already existing lock for the x509store to avoid concurrent
modification of the list of certificateMethods. fixes #14

Sponsored by Lookout Inc.
make sure X509Object list is synchronized properly

Sponsored by Lookout Inc.
make public list private and removed unused field "references"