X509: add OpenSSL comparison

thanks to monnerat for this!