Python: EV certs whitelist generation utility.

Use the scanner to identify and fingerprint all certificates with
an EV policy OID that chain to the correct root for thin policy.