Update pki ca-cert-status

The pki ca-cert-status has been updated to provide params to
specify the nickname of the CA signing cert, the URL or path
of the OCSP responder, and the path of the OCSP request file.
The serial number argument is now optional. In the future this
tool might replace OCSPClient.

The basic OCSP test has been updated to check the cert status
using pki ca-cert-status, OCSPClient, and OpenSSL.

Author: edewata