Add test for pki-server instance-externalcert-add/del

The test for CA cloning with LDAPS connection has been updated
to create a CA, add an external cert, clone the CA, remove and
reinstall the clone, then remove the external cert.