(#16798) Fix certificate revocation by serial number

The documentation states that you should be able to revoke
a SSL certificate with 'puppet cert revoke <hex_serial>'
but in practice that doesn't work. This patch enables that
functionality and adds a unit test to check for that scenario.