Be more strict on compilation
Fully parse X.509v3 certificates (without doing anything useful)
Extend test harness to parse all X.509 certificates.

It turns out there are still lots of parsin errors.