Review Maven dependencies

[iaik-jheher]

After the A-Trust rewrite in 4.4.3, there's a few dependencies that are likely no longer needed. Of particular interest is commons-httpclient 3.1, which is 1) old and 2) vulnerable.

Review if we still use them, and get rid of them if we don't.