Use new rwlock for ssl certificate.

This eliminates the custom-rolled rwlock and uses the new rwlock wrapper.

This needs to be tested on Win32 before it can be merged. It's also a good idea to run wraptest.