Attempt to port to rustls 0.20

[mfelsche]

This is the continuation of #47 dressed up as a new PR. This is based on the heavy lifting done by @silverjam and some minor contributions by me.

This updates the certs used for testing as some were expired. I added a script based on openssl to regenerate the ones i updated. They are valid for 10 years.

This obsoletes #47