Problem: we don't support zcert

* added start of cert support

Most of this (all?) could be done in pure Go.  For now, I am wrapping the C libraries.  Once unit tests are in place for all tests we wish to support, we can look at what can be moved up from the C layer into pure Go.