x509 format

allows creating self-signed and CA-signed (CA needs to be in trocla, of course) SSL certificates.