better certificate support

[cquenelle]

There are some related issues I ran into yesterday when I tried to use certificates with geminispace.org and gemini://station.martinrue.com/

• No way to explicitly create a certificate when it is not forced by a gemini page.
  (Maybe I didn't find the right gesture?)

• No way to explicitly apply an existing certificate to a new page or an entire domain