determine when a certificate was probably issued by a CA in our program

This should be helpful for #8.