Update auxiliary ShowCertificateAction to take first certificate from storage, change note at the bottom of dialog
Accepted certificates are shown in tree, grouped by organization name, like in browsers. Not valid certificates look strikeout.
Merge remote-tracking branch 'origin/master'