Add helper to get/set EKCert and AIKCert

[josephlr]

We have utility methods to get the EK and AIK public keys (for both RSA and ECC). We should also have a way for users to easily fetch the corresponding certs.

This is mostly just reading/writing NVData and converting it to a x509.Certificate.