ca-script: replace openssl with pki-playground

The only bytes different between the templates produced by this code and
`main` is the date in `notBefore` which is expected.

This commit removes all of the stored keys. Certs will be generated for
different keys each time but the generated templates are unaffected.

Author: flihp