make-ca-1.12
- Remove extraneos output at end of downloaded certdata.txt file
- Work around bug in p11-kit trust extract that allows certificates with nss-{email,server}-distust after attribute to enter downstream trust bundles where this attribute is not honored.