Beef up CertStore, add DH params.
Much more sophisticated certificate store

- Handle wildcard lookup
- Handle lookup of SANs
- Provide hooks for registering override certs and keys for specific
domains (including wildcard specifications)
Handler convert_to_ssl now takes a key object, not a path.
CertStore: cope with certs that have no common name