Sign pkcs11-certificate produces invalid bundles: missing base64 encoding and missing tlog_entries field

[sampras343]

Description

Bug A:
Missing `base64.b64encode() on certificate raw_bytes

The PKCS#11 code passes raw DER bytes to X509Certificate(raw_bytes=...):

raw_bytes=certificate.public_bytes(encoding=serialization.Encoding.DER)
But the protobuf X509Certificate.raw_bytes field expects base64-encoded DER bytes. The non-PKCS#11 sign certificate correctly wraps this.

Bug B: Missing tlog_entries=[] in VerificationMaterial

Version

1.1.1

[mihaimaruseac]

Fixed by #615