(PE-4308) API support for certificate_status endpoint

The first commit is for revoking certs, the second is for calculating the fingerprints of certs/csrs that are in the cert_status response, and the third is simply a convenience function for getting the subject DNS alt names from a cert/csr.

As I mentioned in standup, I broke the CRL API to no longer take a list of extensions - those will be added automatically now.
Despite it being surprisingly difficult to see what libraries we've already done this for, I see that PuppetDB already has a transitive dependency on this library via the clj-http dependency, and that commons-codec was one that we saw when we first did this for All The Things - see my comment on https://tickets.puppetlabs.com/browse/PE-2756