1. Reject DSA certificates instead of ignoring them.
2. Resolved potential crash when trying to calculate a Subject Key
   ID when the public key is missing from a certificate.
case insensitivity fix for domain name check
New server-ecc.pem. Old copy expired today.
added x.509 text dump to the server-ecc.pem cert