certificate: currently this includes trust settings and a "friendly name".
DSA_METHOD to make it more consistent with RSA_METHOD.