More conversion functions

This contains 3 sets of changes:
* Add -> functions for reading/writing CRLs to PEMs
* Add -> functions for working with a single certificate
* Move the issued-by? and has-subject? out of the API and into the tests

Well, as long as there was a lengthy discussion, I'm cool.