in the protogeni code. We no longer save the unencrypted certs after
they are revoked, since protogeni will ignore them. I redid the the
DB table as well, adding a revoked stamp, and the DN so that we can
generate the CRL list from the DB directly, without having to run them
all through openssl.

This commit requires all certs to be regenerated, and the ssl xmlrpc
server to be restarted.