Merge pull request #2360 from obi1kenobi/master

SubjectKeyIdentifier equality now uses constant-time digest comparison.