handle (CRL) extension's issuerAltName wrapping without an exception being thrown
re-invent OpenSSL::TestX509CRL#test_extension without the order requirement
support (so-far only dummy) @servername_cb attribute on SSLSocket
warn when incompatible mocha found
make our (OpenSSL copied) SSL server helpers "still" compatible with 1.8 (due 1.6.8)