ports not handled properly in CA mapping

[bparees]

since CAs for hostnames with a port have to be provided as configmap keys like "host..port" because colon is not allowed, the logic that copies the CA to the final destination needs to replace the final ".." with a colon (assuming a final .. is present).

Note that "foo.bar." is a valid hostname which means "foo.bar...5000" (3 dots) is valid. so the logic needs to account for that and replace the correct pair of dots.