Auto-generated SSL certs now match "snakeoil" defaults

This change emulates the auto-generated snakeoil certificate from Ubuntu 14.04. The main changes including moving to 2048-bit RSA, SHA256, a single name CN for subject/issuer, and the removal of most certificate extensions.
Land #4247 - Auto-generated SSL certs now match "snakeoil" defaults