Define key management strategy for extended validation

[pastaghost]

Establish mechanism for generating, rotating, and verifying signatures made with signing keys for extended validation metadata