Use certmonger for certs

Replace custom openssl certificate generation with calls to the
certmonger local CA. Ideally we would use the certmaster backend for
devstack however it lacks some features we require.

Change-Id: Ib0164bb27233e2b67b1580ce350a5ea9e4330834