add several new x509 test vectors

Slightly reorganized the test vector page too.
This should say self-signed, not root. It's a fake cert, root makes little sense. It should also specify that it is a CA cert.