Currently, `certctl rehash` will just keep clobbering .0 rather than incrementing the suffix upon encountering a duplicate. Do this, and do it for revocations as well. While here, we fix revocations to use the proper notation: .rD instead of .Dblacklisted certs as well.
PR: 246614