Allow unknown as well as offline CAs to be removed via UI

added the ability to remove (deregister) CAs from the UI, but only for offline state.

However, as the CA timeout code () never transitions an unknown state CA to offline state, a CA that was created in unknown state can hang around forever in the UI with no way to get rid of it.

This change allows unknown CAs to be removed via UI.