RFE: Backend-neutral API for key objects

[sklemer1]

We should implement a 'cert' and/or 'key' object with clean getters for things like subject, issuer, type, key-type (RSA, EC..), pem, der, keysize... .

This affects utils.pem2cert(), utils.b642cert(), crypto.from_keyspec() .