v260
keyutil: Add extract-certificate
Introduce systemd-keyutil to do various key/certificate operations