Adding arbitrary X509-related functions. These are from LCMAPS. And from what I now know about OpenSSL, some might be re-written to be less fragile or use less memory.