WIP: Feat/update certs
This solves: bitmask-dev#8958 (closed)
See the commit message in 07df10c1 for details
I want to tag 0.6 after this, and also this is blocking bitmask 0.10a2
This MR is stil missing tests, they need more work, but ready for review.