use openssl assert
change _build* to _decode*
make CRLs into iterators
various fixes
2 files changed