Allow certificates to be blacklisted.

Currently the blacklist is maintained as SHA-1 digests of the full
DER-encoded binary certificate. Attempting to connect to a server
presenting a blacklisted certificate will fail and print an error
message to the Console.
Add test for certificate blacklisting mechanism.