collect statistics about CA

while apps are creating TLS connections, the daemon should (asynchronously) reslove the whole certificates chain of every visited host and collect statistics about what certification authority is being used for each one (incrementing its connection counter in a new `by_ca map[string]int` field. These new stats should be rendered as a new tab in the UI.