x509 is largely implemented (missing digest and extensions)

ssl is also a bit closer.