base.m4: Use certlists including the issuer, rather than bare certificates.