Rewrite dns-cert.c to not use the gpg-only iobuf stuff.