Supporting multiple ARI drafts

[damisanet]

@jdkasten

Code that fixes the issue should be rolling out to production tomorrow.

I confirm that ARI checks for zero-padded serial numbers no longer return 400 Bad Requests. Thanks for prompt fix!