X.509 Certificate checks and validations routines.

Follows RFC5280 / RFC6818.