These binaries were already being built but were being discarded.
Since reproducible builds of these tools are likely to be useful to
some people (even though they're not required for Tor Browser to
operate), it seems like they're worth distributing.

They're placed in the mar-tools zip because that's where certutil was
already being placed.