Test framework for x509 certificates, doubles as a bit of how-to.