utils: add get_ssh_key_from_cert()
This new call only extracts the ssh key out of a certificate with the
help of NSS or OpenSSL without verifying the certificate.
Related to https://pagure.io/SSSD/sssd/issue/3489
Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>