Starting to work on CNG support

Will begin with RSA certificates that use a CNG key storage provider, and go from there.