Expose signing certificate on an endpoint.

Resolves #13.

Note that the certificate is deliberately exposed as text/plain to
avoid things like the browser trying to use it as a CA.