Add a -certsout option to output any certificates in a message.

Add test for example 4.11