Follow-up ticket for #6966

cert-find has been modified to use HTTP on port 80/TCP instead of 8080/TCP. We should avoid plain HTTP and use HTTPS everywhere. It's not just a matter of privacy protection but also integrity protection. We should consider any network except localhost as untrusted.

There are just a few cases where unprotected communication is necessary or unavoidable: CRL download, OCSP status requests, CA bootstrapping, and AIA chasing. In all but the CA bootstrapping case, integrity is ensured by signatures or similar means.