Generate etag/last-modified for cert-urls

[twifkak]

trafficstars

The etag should be a digest of the entire cert-chain including OCSP response. Additionally, we may want to handle incoming conditional headers and return 304 as appropriate.

[twifkak]

(The other half is #112 for SXGs.)